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CWinbond 
1. GENERAL DESCRIPTION 


W39V040FB 


The W39V040FB is a 4-megabit, 3.3-volt only CMOS flash memory organized as 512K x 8 bits. For 
flexible erase capability, the 4Mbits of data are divided into 8 uniform sectors of 64 Kbytes. The device 
can be programmed and erased in-system with a standard 3.3V power supply. A 12-volt VPP is 
required for accelerated program. The unique cell architecture of the W39V040FB results in fast 
program/erase operations with extremely low current consumption. This device can operate at two 
modes, Programmer bus interface mode, Firmware Hub (FWH) bus interface mode. As in the 
Programmer interface mode, it acts like the traditional flash but with a multiplexed address inputs. But 
in the FWH interface mode, this device complies with the Intel FWH specification. The device can also 
be programmed and erased using standard EPROM programmers. 


2. FEATURES 


Single 3.3-volt operations: 

— 3.3-volt Read 

— 3.3-volt Erase 

— 3.3-volt Program 

Fast Program operation: 

— Byte-by-Byte programming: 9 uS (typ.) 
(VPP = 12V) 

— Byte-by-Byte programming: 12 uS (typ.) 
(VPP = Vcc) 


Fast Erase operation: 
— Sector erase 0.6 Sec. (typ.) 


Fast Read access time: Tkq 11 nS 
Endurance: 10K cycles (typ.) 
Twenty-year data retention 

8 Even sectors with 64K bytes 

Any individual sector can be erased 
Hardware protection: 


—#TBL supports 64-Kbyte Boot Block 
hardware protection 


— #WP supports the whole chip except Boot 
Block hardware protection 


Low power consumption 


— Active current: 15 mA (typ. for FWH read 
mode) 


Automatic program and erase timing with 
internal VPP generation 


End of program or erase detection 

— Toggle bit 

— Data polling 

Latched address and data 

TTL compatible I/O 

Available packages: 32L PLCC, 32L STSOP 
32L PLCC Lead free, 32L STSOP Lead free 
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3. PIN CONFIGURATIONS 
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5. PIN DESCRIPTION 
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6. FUNCTIONAL DESCRIPTION 


6.1 Interface Mode Selection and Description 


This device can operate in two interface modes, one is Programmer interface mode, and the other is 
FWH interface mode. The IC (Mode) pin of the device provides the control between these two 
interface modes. These interface modes need to be configured before power up or return from 
#RESET. When IC (Mode) pin is set to VDD, the device will be in the Programmer mode; while the IC 
(Mode) pin is set to low state (or leaved no connection), it will be in the FWH mode. In Programmer 
mode, this device just behaves like traditional flash parts with 8 data lines. But the row and column 
address inputs are multiplexed. The row address are mapped to the higher internal address A[18:11]. 
And the column address are mapped to the lower internal address A[10:0]. For FWH mode, it 
complies with the FWH Interface Specification, through the FWH[3:0] to communicate with the system 
chipset . 


6.2 Read (Write) Mode 


In Programmer interface mode, the read (write) operation of the W39V040FB is controlled by #OE 
(#WE). The #0E (#WE) is held low for the host to obtain (write) data from (to) the outputs (inputs). 
#OE is the output control and is used to gate data from the output pins. The data bus is in high 
impedance state when #OE is high. As for in the FWH interface mode, the read or write is determined 
by the "bit 0 & bit 1 of START CYCLE ". Refer to the FWH cycle definition and timing waveforms for 
further details. 


6.3 Reset Operation 


The #RESET input pin can be used in some application. When #RESET pin is at high state, the 
device is in normal operation mode. When #RESET pin is at low state, it will halt the device and all 
outputs will be at high impedance state. As the high state re-asserted to the #RESET pin, the device 
will return to read or standby mode, it depends on the control signals. 


6.4 Boot Block Operation and Hardware Protection at Initial- #TBL & #WP 


There is a hardware method to protect the top boot block and other sectors. Before power on 
programmer, tie the #TBL pin to low state and then the top boot block will not be programmed/erased. 
If #WP pin is tied to low state before power on, the other sectors will not be programmed/erased. 


In order to detect whether the boot block feature is set on or not, users can perform software 
command sequence: enter the product identification mode (see Command Codes for 
Identification/Boot Block Lockout Detection for specific code), and then read from address 
7FFF2(hex). You can check the DQ2/DQ3 at the address 7FFF2 to see whether the #TBL/FWP pin is 
in low or high state. If the DQ2 is “0”, it means the #TBL pin is tied to high state. In such condition, 
whether boot block can be programmed/erased or not will depend on software setting. On the other 
hand, if the DQ2 is “1”, it means the #TBL pin is tied to low state, then boot block is locked no matter 
how the software is set. Like the DQ2, the DQ3 inversely mirrors the #WP state. If the DQ3 is “O”, it 
means the #WP pin is in high state, then all the sectors except the boot block can be 
programmed/erased. On the other hand, if the DQ3 is “1”, then all the sectors except the boot block 
are programmed/erased inhibited. 


To return to normal operation, perform a three-byte command sequence (or an alternate single-byte 
command) to exit the identification mode. For the specific code, see Command Codes for 
Identification/Boot Block Lockout Detection. 
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6.5 Sector Erase Command 


Sector erase is a six-bus cycles operation. There are two "unlock" write cycles, followed by writing the 
"set-up" command. Two more "unlock" write cycles then follows by the Sector erase command. The 
Sector address (any address location within the desired Sector) is latched on the rising edge of R/#C 
in programmer mode, while the command (30H) is latched on the rising edge of #WE. 


Sector erase does not require the user to program the device prior to erase. When erasing a Sector, 
the remaining unselected sectors are not affected. The system is not required to provide any controls 
or timings during these operations. 


The automatic Sector erase begins after the erase command is completed, right from the rising edge 
of the #WE pulse for the last Sector erase command pulse and terminates when the data on DQ7, 
Data Polling, is "1" at which time the device returns to the read mode. Data Polling must be performed 
at an address within any of the sectors being erased. 


Refer to the Erase Command flow Chart using typical command strings and bus operations. 


6.6 Program Operation 


The W39V040FB is programmed on a byte-by-byte basis. Program operation can only change logical 
data "1" to logical data "0." The erase operation, which changed entire data in main memory and/or 
boot block from "0" to "1", is needed before programming. 


The program operation is initiated by a 4-byte command cycle (see Command Codes for Byte 
Programming). The device will internally enter the program operation immediately after the byte- 
program command is entered. The internal program timer will automatically time-out (12uS typ. - TBP) 
once it is completed and then return to normal read mode. Data polling and/or Toggle Bits can be 
used to detect end of program cycle. 


6.7 Hardware Data Protection 
The integrity of the data stored in the W39V040FB is also hardware protected in the following ways: 
(1) Noise/Glitch Protection: A #WE pulse of less than 5 nS in duration will not initiate a write cycle. 


(2) VDD Power Up/Down Detection: The programming and read operation are inhibited when VDD is 
less than 2.0V typical. 


(3) Write Inhibit Mode: Forcing #OE low or #WE high will inhibit the write operation. This prevents 
inadvertent writes during power-up or power-down periods. 


6.8 WRITE OPERATION STATUS 


The device provides several bits to determine the status of a program or erase operation: DQ5, DQ6, 
and DQ7. Each of DQ7 and DQ6 provides a method for determining whether a program or erase 
operation is complete or in progress. The device also offers a hardware-based output signal, RY/#BY 
in programmer mode, to determine whether an Embedded Program or Erase operation is in progress 
or has been completed. 


DQ7: #Data Polling 


The #Data Polling bit, DQ7, indicates whether an Embedded Program or Erase algorithm is in 
progress or completed. Data Polling is valid after the rising edge of the final #WE pulse in the 
command sequence. 
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During the Embedded Program algorithm, the device outputs on DQ7 and the complement of the data 
programmed to DQ7. Once the Embedded Program algorithm has completed, the device outputs the 
data programmed to DQ7. The system must provide the program address to read valid status 
information on DQ7. If a program address falls within a protected sector, #Data Polling on DQ7 is 
active for about 11S, and then the device returns to the read mode. 


During the Embedded Erase algorithm, #Data Polling produces “0” on DQ7. Once the Embedded 
Erase algorithm has completed, #Data Polling produces “1” on DQ7. An address within any of the 
sectors selected for erasure must be provided to read valid status information on DQ7. 


Just before the completion of an Embedded Program or Erase operation, DQ7 may change 
asynchronously with DQ0-DQ6 while Output Enable (#OE) is set to low. That is, the device may 
change from providing status information to valid data on DQ7. Depending on when it samples the 
DQ7 output, the system may read the status or valid data. Even if the device has completed the 
program or erase operation and DQ7 has valid data, the data outputs on DQ0-DQ6 may be still 
invalid. Valid data on DQ7-DQO will appear on successive read cycles. 


RY/#BY: Ready/#Busy 


The RY/#BY is a dedicated, open-drain output pin which indicates whether an Embedded Algorithm is in 
progress or complete. The RY/#BY status is valid after the rising edge of the final #WE pulse in the 
command sequence. Since RY/#BY is an open-drain output, several RY/#BY pins can be tied together in 
parallel with a pull-up resistor to Vpp. 


When the output is low (Busy), the device is actively erasing or programming. When the output is high 
(Ready), the device is in the read mode or standby mode. 


DQ6: Toggle Bit 


Toggle Bit on DQ6 indicates whether an Embedded Program or Erase algorithm is in progress or 
complete. Toggle Bit | may be read at any address, and is valid after the rising edge of the final #WE 
pulse in the command sequence (before the program or erase operation), and during the sector erase 
time-out. 


During an Embedded Program or Erase algorithm operation, successive read cycles to any address 
cause DQ6 to toggle. The system may use either #OE or #CE to control the read cycles. Once the 
operation has completed, DQ6 stops toggling. 


The system can use DQ6 to determine whether a sector is actively erasing. If the device is actively 
erasing (i.e., the Embedded Erase algorithm is in progress), DQ6 toggles. If a program address falls 
within a protected sector, DQ6 toggles for about 1 ts after the program command sequence is written, 
and then returns to reading array data. 


DQ5: Exceeded Timing Limits 


DQ5 indicates whether the program or erase time has exceeded a specified internal pulse count limit. 
DQ5 produces “1” under these conditions which indicates that the program or erase cycle was not 
successfully completed. 


The device may output “1” on DQ5 if the system tries to program “1” to a location that was previously 
programmed to “0.” Only the erase operation can change “0” back to “1.” Under this condition, the 
device stops the operation, and while the timing limit has been exceeded, DQ5 produces “1.” 


Under both these conditions, the system must write the reset command to return to the read mode. 
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7. REGISTER FOR FWH MODE 


There are three kinds of registers on this device, the General Purpose Input Registers, the Block Lock 
Control Registers and Product Identification Registers. Users can access these registers through 
respective address in the 4Gbytes memory map. There are detail descriptions in the sections below. 


7.1. General Purpose Inputs Register for FWH Mode 
This register reads the FGPI[4:0] pins on the W39V040FB.This is a pass-through register which can 
read via memory address FFBC0100(hex). Since it is pass-through register, there is no default value. 


GPI Register Table 


BIT FUNCTION 
Read FGPI4 pin status 


| 0 | Read FGPIOpin status 





7.2 Product Identification Registers 


In the FWH interface mode, a read from FFBC, 0000(hex) can output the manufacturer code, DA(hex). 
A read from FFBC, 0001 (hex) can output the device code 54(hex). 


There is an alternative software method to read out the Product Identification in both the Programmer 
interface mode and the FWH interface mode. Thus, the programming equipment can automatically 
matches the device with its proper erase and programming algorithms. 


In the software access mode, a or JEDEC 3-byte command sequence can be used to access the 
product ID for programmer interface mode. A read from address 0000(hex) outputs the manufacturer 
code, DA(hex). A read from address 0001(hex) outputs the device code, 54(hex). The product ID 
operation can be terminated by a three-byte command sequence or an alternate one-byte command 
sequence (see Command Definition table for detail). 


7.3. Block Locking Registers 


This part provides 8 even 64Kbytes blocks, and each block can be locked by register control. These 
control registers can be set or clear through memory address. Below is the detail description. 


Please note that this feature is only can be applied on FWH mode. 
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Block Locking Registers type and access memory map Table 


REGISTERS REGISTERS CONTROL DEVICE PHYSICAL AGBYTES SYSTEM 
TYPE BLOCK ADDRESS MEMORY ADDRESS 
BLR7 


BLR6 
BLRS 


7 


Block Locking Register Bits Function Table 


FUNCTION 


Reserved 

Read Lock 

1: Prohibit to read in the block where set 

0: Normal read operation in the block where clear. This is default state. 
Lock Down 


1: Prohibit further to set or clear the Read Lock or Write Lock bits. This Lock Down 
Bit can only be set not clear. Only the device is reset or re-powered, the Lock Down 
Bit is cleared. 


0: Normal operation for Read Lock or Write Lock. This is the default state. 
Write Lock 

1: Prohibited to write in the block where set. This is default state. 

0: Normal programming/erase operation in the block where clear. 














BIT [7:3] BIT 2 BIT 1 BIT 0 RESULT 
00000 0 0 0 Full Access. 


(0 [1 | wrte tock OetautSite 
[1 [0 [Locked Open (Fu Acres Lack Downy 
[0 [0 [Readtockea 
(0 [1 _[Reasawitetoes 
1 


0 Read Locked, Locked Down. 
1 1 Read & Write Locked, Locked Down. 
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7.5 Read Lock 


Any attempt to read the data of read locked block will result in “OOH.” The default state of any block is 
unlocked upon power up. User can clear or set the write lock bit anytime as long as the lock down bit 
is not set. 


7.6 Write Lock 


This is the default state of blocks upon power up. Before any program or erase to the specified block, 
user should clear the write lock bit first. User can clear or set the write lock bit anytime as long as the 
lock down bit is not set. The write lock function is in conjunction with the hardware protect pins, #WP & 
TBL. When hardware protect pins are enabled, it will override the register block locking functions and 
write lock the blocks no matter how the status of the register bits. Reading the register bit will not 
reflect the status of the #WP or #TBL pins. 


7.7 Lock Down 


The default state of lock down bit for any block is unlocked. This bit can be set only once; any further 
attempt to set or clear is ignored. Only the reset from #RESET or #INIT can clear the lock down bit. 
Once the lock down bit is set for a block, then the write lock bit & read lock bit of that block will not be 
set or cleared, and keep its current state. 


7.8 Product Identification Registers 


In the FWH interface mode, a read from FFBC, 0000(hex) can output the manufacturer code, DA(hex). 
A read from FFBC,0001 (hex) can output the device code 54(hex). 


There is an alternative software method (six commands bytes) to read out the Product Identification in 
both the Programmer interface mode and the FWH interface mode. Thus, the programming equipment 
can automatically matches the device with its proper erase and programming algorithms. 


In the software access mode, a six-byte (or JEDEC 3-byte) command sequence can be used to 
access the product ID for programmer interface mode. A read from address 0000(hex) outputs the 
manufacturer code, DA(hex). A read from address 0001(hex) outputs the device code, 54(hex). The 
product ID operation can be terminated by a three-byte command sequence or an alternate one-byte 
command sequence (see Command Definition table for detail). 


8. TABLE OF OPERATING MODES 


8.1 Operating Mode Selection - Programmer Mode 


SSS 
lee ee ee ee 
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8.2 Operating Mode Selection - FWH Mode 


Operation modes in FWH interface mode are determined by "START Cycle" when it is selected. 
When it is not selected, its outputs (FWH[3:0]) will be disable. Please reference to the "FWH Cycle 
Definition". 


8.3 FWH Cycle Definition 





NO. OF 
FIELD CLOCKS DESCRIPTION 





"1101b" indicates FWH Memory Read cycle; while "1110b" indicates FWH 
Memory Write cycle. 0000b" appears on FWH bus to indicate the initial 


IDSEL This one clock field indicates which FWH component is being selected. 


MSIZE ae Memory Size. There is always show “OOOOb” for single byte access. 
| TAR | 2 Turned Around Time 


Address Phase for Memory Cycle. FWH supports the 28 bits address 
ADDR 7 protocol. The addresses transfer most significant nibble first and least 

significant nibble last. (i.e. Address[27:24] on FWH[3:0] first, and 

Address[3:0] on FWH[3:0] last.) 

Synchronous to add wait state. "0000b" means Ready, "0101b" means 
SYNC Short Wait, "0110b" means Long Wait, "1001b" for DMA only, "1010b" 

means error, and other values are reserved. 

Data Phase for Memory Cycle. The data transfer least significant nibble 
DATA 2 first and most significant nibble last. (i.e. DQ[3:0] on FWH[3:0] first, then 

DQ[7:4] on FWH{[3:0] last.) 


9. TABLE OF COMMAND DEFINITION 


DESCRIPTION Gvcles (1) | Addr. Data 4 Data = Data mane Data sy Data ae Data 
Read Tt | Aw Dour _| 
eae ee a omc ec 
[Byte Program | 4 | 5555 AA | 2AAA 55 | 5555 AO | An Dw | | 
[ProductiDentry | 3 | 5555 AA | 2aaa 55 | 5555 90 | | | 
[Product IDexit | 3 | 5555 AA | 2AAA 55 | 5555 FO | | | 
PProauctiDext™ | 1 | xxxro | | | +| +i. +4 


Notes: 1. The cycle means the write command cycle not the FWH clock cycle. 


2. The Column Address / Row Address are mapped to the Low / High order Internal Address. i.e. Column Address 
A[10:0] are mapped to the internal A[10:0], Row Address A[7:0] are mapped to the internal A[18:11] 


3. Address Format: A14—A0 (Hex); Data Format: DQ7-DQ0 (Hex) 
4. Either one of the two Product ID Exit commands can be used. 
5. SA: Sector Address 


START 1 









































SA = 7XXXXh for Unique Sector7 (Boot Sector) SA = 3XXXXh for Unique Sector3 
SA = 6XXXXh for Unique Sector6 SA = 2XXXXh for Unique Sector2 
SA = 5XXXXh for Unique Sector5 SA = 1XXXXh for Unique Sector1 
SA = 4XXXXh for Unique Sector4 SA = OXXXXh for Unique SectorO 
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9.1 Embedded Programming Algorithm 





Write Program Command Sequence 
(see below) 


| 


#Data Polling/ Toggle bit 











| 


Programming Completed 


Program Command Sequence (Address/Command): 


5555H/AAH 
2AAAH/55H 
5555H/AOH 


Program Address/Program Data 
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9.2 Embedded Erase Algorithm 


Start 


— 


Write Erase Command Sequence 
(see below) 


#Data Polling or Toggle Bit 


Erasure Completed 























Individual Sector Erase 
Command Sequence 
(Address/Command): 


5555H/AAH 





2AAAH/55H 





au 





5555H/80H 





5555H/AAH 








| 2AAAH/55H 








¥ 


| Sector Address/30H 
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9.3. Embedded #Data Polling Algorithm 





Start 


Read Byte 
(DQO - DQ7) 


Address = SA 



















Yes 
DQ7 = Data 
? 
No 

Read Byte 
(DQO - DQ7) 

Address = SA 

Yes 

DQ7 = Data 


Note: SA = Valid address for programming .During a sector erase 
operation, a valid address is an address within any sector selected for 
erasure. 
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9.4 Embedded Toggle Bit Algorithm 


Read Byte 
(DQ0-DQ7) 


Read Byte 
(DQ0-DQ7) 





W39V040FB 








No 
Toggle Bit 
=Toggle ? 
Read Byte 
(DQ0-DQ7) Twin 
No 








Toggle Bit 
=Toggle ? 


Program/Erase 


Operation Not 


Complete, Write 








Program/Erase 
Operation complete 





Reset Command 





Note: Recheck toggle bit because it may stop toggling as DQ5 changes to “1”. 
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9.5 Software Product Identification and Boot Block Lockout Detection Acquisition 


Flow 





Product 
Identification 


Entry (1) 


Load data AA 
to 
address 5555 


Load data 55 
to 
address 2AAA 


Load data 90 
to 
address 5555 


Pause 10 LS 












Product 
Identification 

and Boot Block 
Lockout Detection 


Mode (3) 


Read address = 00000 
data = DA 


Read address = 00001 
data = 54 


Read address = 7FFF2 


Check DQ[3:0] of data 
outputs 


Product 
Identification Exit(6) 


Load data AA 
to 
address 5555 


Load data 55 
to 
address 2AAA 


Load data FO 
to 
address 5555 





Pause 10 LS 





Normal Mode 





Notes for software product identification/boot block lockout detection: 
(1) Data Format: DQ7—DQ0 (Hex); Address Format: A14—A0 (Hex) 
(2) A1-A18 = ViL; manufacture code is read for AO = VIL; device code is read for AO = VIH. 

(3) The device does not remain in identification and boot block lockout detection mode if power down. 
(4) The DQ[3:2] to indicate the sectors protect status as below: 








DQ2 


DQ3 





0 | 64Kbytes Boot Block Unlocked 
by #TBL hardware trapping 


trapping Except Boot Block 


Whole Chip Unlocked by #WP hardware 





1 64Kbytes Boot Block Locked by 


Whole Chip Locked by #WP hardware 


#TBL hardware trapping 














trapping Except Boot Block 














(5) The device returns to standard operation mode. 
(6) Optional 1-write cycle (write FO (hex.) at XXXX address) can be used to exit the product identification/boot block lockout 


detection. 
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10. ELECTRICAL CHARACTERISTICS 
10.1 Absolute Maximum Ratings 




















PARAMETER RATING UNIT 
Operating Temperature 0 to +70 °C 
Storage Temperature -65 to +150 °C 
Power Supply Voltage to Vss Potential -0.5 to +4.0 V 
D.C. Voltage on Any Pin to Ground Potential -0.5 to VDD +0.5 Vv 
VPP Voltage -0.5 to +13 Vv 
Transient Voltage (<20 nS) on Any Pin to Ground Potential -1.0 to VDD +0.5 Vv 








Note: Exposure to conditions beyond those listed under Absolute Maximum Ratings May adversely affect the life and reliability 
of the device. 


10.2 Programmer interface Mode DC Operating Characteristics 
(VbD = 3.3V + 0.3V, Vss= OV, TA= 0 to 70° C) 

LIMITS 
.|TYP.| MAX. 


PARAMETER . TEST CONDITIONS 








Power Supply In Read or Write mode, all DQs open 
Current Address inputs = 3.0V/0V, at f = 3 MHz 


Input Leakage 
Current 


15 30 





VIN = Vss to VDD 90 





Output Leakage 
Current 


VouT = Vss to VDD 90 





Input Low Voltage : 0.8 





Input High Voltage : VbD +0.5 
Output Low Voltage IoL = 2.1 mA 0.45 
Output High Voltage IOH = -0.1mMA ; - 
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10.3 FWH Interface Mode DC Operating Characteristics 
(VpD = 3.3V + 0.3V, Vss= OV, TA= 0 to 70° C) 


PARAMETER SY 
Power Supply Current All lout = OA, CLK = 33 MHz, 
Ic ; 
Read in FWH mode operation. 
Power Supply Current CLK = 33 MHz 
Icc |}. , 
Program/Erase in FWH mode operation. 
FWH4 = 0.9 VppD, CLK = 33 MHz, 


Standby Current 1 all inputs = 0.9 VoD / 0.1 Vpp 
no internal operation 





M. TEST CONDITIONS 





FWH4 = 0.1 Vpb, CLK = 33 MHz, 


Standby Current 2 all inputs = 0.9 Vpp /0.1 Vpp 
no internal operation. 


Input Low Voltage - 


-0.5 - 
Input Low Voltage of 


Input High Voltage of 
#INIT Pin 1.35 V Vpp +0.5 


et 
V 
vat P= [eaves |v 





10.4 Power-up Timing 


PARAMETER SYMBOL 


Power-up to Read Operation TPU. READ 


Power-up to Write Operation TPU. WRITE 5 








10.5 Capacitance 
(VpD = 3.3V, TA= 25° C, f = 1 MHz) 


PARAMETER SYMBOL CONDITIONS 
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10.6 Programmer Interface Mode AC Characteristics 


AC Test Conditions 


PARAMETER CONDITIONS 


Input Pulse Levels OV to 0.9 VDD 


Input Rise/Fall Time <5nS 
Input/Output Timing Level 1.5V/1.5V 








Output Load 1 TTL Gate and CL = 30 pF 


AC Test Load and Waveform 


+3.3V 


1.8KQ 


Dout 








Input Output 
30 pF 0.9VDD 
(Including Jig and 1.3KQ 1.5V 1.5V 
Scope) ov A 4 
Test Point Test Point 
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Programmer Interface Mode AC Characteristics, continued 


10.7 Read Cycle Timing Parameters 
(VpD = 3.3V + 0.3V, Vss = OV, TA= 0 to 70° C) 





W39V040FB 

MIN. MAX. 
Read Cycle Time TRC 350 - 
Row / Column Address Set Up Time TAS 50 z 
Row / Column Address Hold Time TAH 50 - 
Address Access Time TAA 
Output Enable Access Time TOE 75 
#0E Low to Active Output TOLZ - 
#OE High to High-Z Output TOHZ 35 
Output Hold from Address Change TOH 


PARAMETER SYMBOL 












































10.8 Write Cycle Timing Parameters 


PARAMETER SYMBOL 

Reset Time TRST 
Address Setup Time TAS 
Address Hold Time TAH 
R/#C to Write Enable High Time TCWH 
#WE Pulse Width Twpe 
#WE High Width TWPH 
Data Setup Time TDS 
Data Hold Time TDH 
#OE Hold Time TOEH 
Byte programming Time TBP 
Sector Erase Cycle Time (Note 2) TPEC 
Program/Erase Valid to RY/#BY Delay TBUSY 
























































Notes: 1. All AC timing signals observe the following guidelines for determining setup and hold times: 
(a) High level signal's reference level is input high and (b) low level signal's reference level is input low. 
Ref. to the AC testing condition. 
2. Exclude 00H pre-program prior to erasure. (In the pre-programming step of the embedded erase algorithm, 
all bytes are programmed to OOH before erasure 





10.9 Data Polling and Toggle Bit Timing Parameters 


W39V040FB 
MAX. 
#0E to Data Polling Output Delay TOEP 350 
#0OE to Toggle Bit Output Delay TOET 350 
Toggle or Polling interval : - 


PARAMETER SYMBOL 
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11. TIMING WAVEFORMS FOR PROGRAMMER INTERFACE MODE 
11.1 Read Cycle Timing Diagram 


#RESET 
TRst ——> Tre 


so Deeeeeeed cm ex eee cama) sovneos KK 











11.2 Write Cycle Timing Diagram 


Trst 
< > 


#RESET / 


(XXXXAXAXAX AN 


A[10:0] 





R/#C / / / \ yO “Ay 
<< TcWH_»— ToeH 
#OE 


#WE 










V 









oar XXXXX XXXXXXXXKKK 
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Timing Waveforms for Programmer Interface Mode, continued 


11.3 Program Cycle Timing Diagram 


i Byte Program Cycle >| 
(Internal A[18:0]) | 75555 5555 |Programmed Addreds 


cara RX m= X= Xe Kom 4g 
ew WL 77 
WT UIT NT ATE eT 








#0E 
TWPH 
> TWP 
#WE 
ia 
Byte 0 Byte 1 Byte 2 Byte3 Internal Write Start 
RY/HBY 


TBUSY 


Note: The internal address A[18:0] are converted from external Column/Row address. 
Column/Row Address are mapped to the Low/High order internal address. 
i.e. Column Address A[10:0] are mapped to the internal A[10:0], 
Row Address A[7:0] are mapped to the internal A[18:11]. 





11.4 #DATA Polling Timing Diagram 


ws XXXVI XOOXMOORE 


(Internal A[18:0]) 


ce NS ae aa 
\_/ ne 
m a Ww 


TOEP 


vr (x) go 
RY/HBY oD, 2 ae 


TBUSY 





= 2? 2 
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Timing Waveforms for Programmer Interface Mode, continued 


11.5 Toggle Bit Timing Diagram 


ww —XXXXXXKKKKKRXEK 44 XXXOKEK 
VS NS NS 4S 


a |- 
#O0E a TON Sf” 


ToET —> <— 


A 
RY#BY ———__ 4 _ ee 














11.6 Sector Erase Timing Diagram 


Six-byte code for 3.3V-only 
Sector Erase 


9" —OOQOOCOCOOCOD MINT 


(Internal A[18:0]) 5555 5555 5555 


cary {Cm X= XX mK = Ke p44 


me WW 77 
woe WW OW OW NTT T 


> 
Twe TpEC ————_> 


#WE 
TwPH x 


™| Internal Erase starts 


Le a 


Note: The internal address A[18:0] are converted from external Column/Row addres Tpusy 
Column/Row Address are mapped to the Low/High order internal address 
i.e. Column Address A[10:0] are mapped to the internal A[10:0] 
Row Address A[7:0] are mapped to the internal A[18:11]. 
SA = Sector Address, Please ref. to the "Table of Command Definition" 


~ 


SBO SB1 SB2 SB3 SB4 SB5 
RY/#BY 
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12. FWH INTERFACE MODE AC CHARACTERISTICS 
12.1 AC Test Conditions 


PARAMETER CONDITIONS 
Input Pulse Levels 0.6 VbD to 0.2 VDD 
Input Rise/Fall Slew Rate 1V/nsS 


Input/Output Timing Level 0.4Vpp / 0.4VbD 
Output Load 1 TTL Gate and CL = 10 pF 


12.2 Read/Write Cycle Hee Parameters 
(VpD = 3.3V + 0.3V, Vss = OV, TA= 0 to 70° C 


PARAMETER SYMBOL W39V040FB 


Clock | Clock CycleTime === =~—*|—siTerc Time TCYc 
Input Set Up Time TSU 
Input Hold Time THD 
Clock to Data Valid TkQ 


Note: Minimum and Maximum time have different load. Please refer to PCI specification. 




















12.3 Reset Timing Parameters 
PARAMETER 





Clock Stable to Reset Active TKRST 
Reset Pulse Width TRSTP 


Reset Active to Output Float TRSTF 




















Note: All AC timing signals observe the following guidelines for determining setup and hold times: 
(a) High level signal's reference level is input high and (b) low level signal's reference level is input low. 


Please refer to the AC testing condition. 
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13. TIMING WAVEFORMS FOR FWH INTERFACE MODE 
13.1 Read Cycle Timing Diagram 


ee Lee EE EL Lee eee el 
#RESET / “Lb Tsu Tao 


FWH4 4b 





Start 
FWH  ipseL 
FWH[3:0] 
1 Clock 1 Clock Posd padres in7 2 Clocks 1 Clock Data out 2 Clocks 2 Clocks 1 Clock 


Note: When A22 = high, the host will read the BIOS code from the FWH device. 
While A22 = low, the host will read the GPI (Add = FFBC0100) or 
Product ID (Add = FFBC0000/FFBC0001) from the FWH device 








13.2 Write Cycle Timing Diagram 























#RESET _/f 
FWH4 “Lz ae Tsu |THD ‘af 


Start 
WH IDSEL Address MSize Data TAR Syne TAR Next Start 
FWH[3:0] 2 \ 1110 o000b X 000 roo Karte te XArt512X arte) Aira) Aon 000) p3:0) ¥ DI7:4] tiv Te-StatdX 00000 111TeX Teen oo00y/ 
t 


Load Data in 2 Clocks 2 Clocks 1 Clock 2 Clocks 1 Clock 
























































1 Clock 1 Clock Load Address in 7 Clocks 
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Timing Waveforms, for FWH Interface Mode, continued 


13.3 Program Cycle Timing Diagram 






















































































































































































































































































































































































































































































ak | | | 
#RESET 
FWH4 
Start next 
4st Start Insel Address MSuze Data: TAR Syne TAR command 
siege » \qnm Kinom )X vee Xam Xi vaine Mason owe Yoon own som WK sone K vom NX tnt Krasae X oot Ki YX taste x 
1Clock 4 Clock Load Address "5555" in 7 Clocks Load Data "AA" in 2 Clocks 2Clocks 1 Clock 2 Clocks 4 Clock 
Write the 1st command to the device in FWH mode. 
otk | | | 
#RESET 
FWHA 
Start next 
‘and Start IDSEL Address MSize Data TAR Syne TAR commieted 
a 8S 6 CS eS CS Ce es a cs 
4Clock 4 Clock Load Address "2AAA" in 7 Clocks Load Data "55" 2 Clocks 1 Clock 2 Clocks 4. Clock 
in 2 Clocks 
Write the 2nd command to the device in FWH mode. 
Gu | | | 
#RESET 
FWH4 
Start next 
3rd Start. IDSEL Address MSize Data TAR Syne TAR conmnand 
FWH[3:0 1110b. oot x XXX x XxXD X OX x x101D x o101b _ o101b Xone X ‘o000b x 0000» x 1010b 3 1111b Yrs YX cote Xe X rsa x 
4.Clock 1 Clock Load Address "5555" in 7 Clocks Load Data "A0" 2 Clocks 1 Clock 2 Clocks 1 Clock 
in 2 Clocks 
Write the 3rd command to the device in FWH mode. 
aK | | | | 
#RESET 
FWH4 Internal 
program start 
Ath Start IDSEL Address MSize Data TAR ‘Sync TAR 
FWHI3:0 | 1410b Yoon id XXXXb x ORD X ae Y ace x A118) XK Ar4] x 13:0] X x Dps0) Xx Dir] \ 1111b Yrs come es Yes Internal 
program start 
14Clock 1 Clock Load Ain in 7 Clocks Load Din in 2 Clocks 2.Clocks 1 Clock 2 Clocks 
Write the 4th command(target location to be programmed) to the device in FWH mode. 
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Timing Waveforms for FWH Interface Mode, continued 


13.4 #DATA Polling Timing Diagram 











abe ELLE LE LL LLL - 


#RESET / Z C 
FWH4 4b \ / 
MSize Data Sync TA 


Start IDSEL Address TAR R 
xxxxd Wx “oY VY V 
FWH{S:0] 0000b sete) X anits:ta] X antrtsay X ania) X anisoa X 000d X Da{3:0] X Oniv:4] KX 1111b XTriStateX 00006 X 1111b X Tri-State 


"An" i Load Data "Dn" 
1 Clock 1 Clock Load Address "An" in 7 Clocks in 2 Clocks 2 Clocks 1 Clock 2 Clocks 1 Clock 


Write the last command(program or erase) to the device in FWH mode. 


« IL4IUUUUUUUU UU UU UU UU 
wrest 


XXXXb 
FWH4 4s \ / \ / 
TAR Next Start 











Ao 4 


Next Start 














Start IDSEL Address MSize TAR Sync Data 
FWH[3:0] 4b ANT (co), (onan, Gana X ancia:te) X Antis:12)  Anftt:8) X Ani7:a] XX An(3:0) X 0000b (11115 X Te-state) 0000b X XXXXb {087 ex) 1111b X Tri-State (/ 
1 Clock 1 Clock Load Address in 7 Clocks 2 Clocks 1 Clock Data out 2 Clocks 2 Clocks 1 Clock 


Read the DQ7 to see if the internal write complete or not. 


a, ge) ee Lele el ile LL ere) 
weset 


pa NT 


Start IDSEL Address Msize TAR Sync Data TA Next Start 


R 
FWH[3:0) ee \11010) 0000b ES € Ga. c, An{11:8] Anj7:4) X An(3:0] X 0000b X 1111b X Tri-StateX 0000b XXXXb_ X Dn7,xxx it1tb K TiState K / 
2 Clocks 1 Clock 


1 Clock 1 Clock Load Address in 7 Clocks 2 Clocks 1 Clock Data out 2 Clocks 











When internal write complete, the DQ7 will equal to Dn7. 
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Timing Waveforms for FWH Interface Mode, continued 


13.5 Toggle Bit Timing Diagram 








am LP LL LE LE LL EL Lee LL 


FWH4 Lb \ / \ / 
TAR Next Start 























Start IDSEL Address MSize Data TAR Sync 
FWH[3:0] “zj \1110bX oooob X rors)” sooo Katee) X52 x A118] X Atv] X AI3:0] X 0000b X Dj3:0] Kor X 1111b X Ti-State 0000b C1111 X Tristate X—/ 
1 Clock 1 Clock Load Address "An" in 7 Clocks pea ate ns 2Clocks 1 Clock 2 Clocks 1 Clock 


Write the last command(program or erase) to the device in FWH mode. 


oe Lee LE LEE Le LiL LLL 


FWH4 4s \ / \ / 
TAR TAR 


























Start IDSEL Address M Size Syne Data Next Start 
FWH{[3:0] Lb \ 1018) 0000b XXXXb xxxxb XK XXxXxXb K XXXXbK XXXXb x XXXXb X XXXXbX 0000bX 1111b \ Ti-statd 0000b X XXXXb X xe xe) 1111b X Tri-State 
1 Clock 1 Clock Load Address in 7 Clocks 2 Clocks 1 Clock Data out 2 Clocks 2 Clocks 1 Clock 


Read the DQ6 to see if the internal write complete or not. 























Start IDSEL Address MSize TAR Sync Data TAR Next Start 
FWH[3:0] 4b \1101DX o000b X Xxx X wx X von X 100K ro0c)X 00x XXXXbX 0000b i D6) 1111b X Te-state ) 
1 Clock 1 Clock Load Address in 7 Clocks 2 Clocks 1 Clock Data out 2 Clocks 2 Clocks 1 Clock 


When internal write complete, the DQ6 will stop toggle. 
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Timing Waveforms for FWH Interface Mode, continued 


Sector Erase Timing Diagram 


CLK 


#RESET 


FWH4 


FWH[3:0] 








Slat LL EU ELL EL 
aI % 


ay a 









Start next 
4st Start IDSEL Address M Size Data TAR Sync TAR command 
_—= Y/ Y 
L 1110b, X1011 0101bX 0101bX 0101b, 1010bX 1010b, A late, 1111b A X_/ 
4 Clock 1 Clock Load Address "5555" in 7 Clocks Toad Dee "AA" 2Clocks = 1Clock = 2Clocks~—_1 Clock 
i 


CLK 


#RESET 


FWH4 


FWHI3:0] 


CLK 


#RESET 


FWH4 


FWH(S:0] 


CLK 


#RESET 


FWH4 


FWH{S:0} 


cLK 


#RESET 


FWH4 


FWH{S:0] 


cK 


#RESET 


FWHS 


FWH{S:0} 


Write the 1st command to the device in FWH mode. 


aL Le LL eer Le ee es 








Start next 


2nd Start IDSEL Address M Data TAR Sync TAR command 


\ir722)Qo00e X, 00K 000% voo0w XK xor 00K toro 4010 X t010bX 000 X crow X ovo X 117K 1111b Krai. siatoX 0000b eX Tr Sito X / 


4 Clock 1 Clock Load Address "2AAA" in 7 Clocks Load Data "55" 2Clocks Clock -2Clocks 1 Clock 
i 


Write the 2nd command to the device in FWH mode. 


aL LE EP LE Le Le Le cer Le 











Start next 


Daley ‘command 


Address TAR TAR 


V 
rox K rox KX X101b X o101bh 0101bX 0101bK 0000 ‘000 YX 10008 111 16X Th-StateX 0000 1111 X Testa) 


Load Address "5555" in 7 Clocks Load Data"80"  2Clocks  1Clocks 2 Clocks 
in 2 Clocks 


Write the 3rd command to the device in FWH mode. 


SUL 


M Size Syne 


3rd Start IDSEL 








1110bX 0000b X xxxxe 


1 Clocks! Clocks 1 Clocks 





Start next 
4th Start IDSEL Address MSize Data v Syne v ‘command 


"AR AR 
VY Y Y 
110K 00000 KX XBX 00% K rox K_X101bX 0101» X 0101 X O101b X 0000 K 10104 1010vX_ 111th X eX 0000b K_1111bX TriState, 


1 Clock 4 Clock Load Address "5555" in 7 Clocks eee "AA" 2 Clocks 1 Clock 2 Clocks 1 Clock 
in 2 Clocks 


Write the 4th command to the device in FWH mode. 


aL ELL Eee LL Leer 














Start next 
sth Start IDSEL Address MSize Data TAR. Sync TAR command 


\i1108X e000 xox) a0 v000 K X0106 K 1010b K 1010b X 1010 000K 0101 o101b 11110) Testa) 000 X 1111 XK ri-stateX —/ 


1 Clock 1 Clock Load Address "2AAA" in 7 Clocks Load Data "55" 2 Clocks 1 Clock 2 Clocks 1 Clock 
in 2 Clocks 


Write the Sth command to the device in FWH mode. 


SLE LA LL LLL LLL Lei LPs 

















Internal 


Lf t— 





erase start 
6th Start IDSEL Address MSize Data TAR ‘Sync TAR 
X iv-siaX one X 1X 
by XXXXbK XXXXb_ y 0000b 0011b 1111b 0000b of Internal 
\ i100) 00006 (18:16) KX XXXXBK XXXXEK XXXXEX XXXXE) 0006 X Kireistate x Lefora 
4 Clock 1 Clock Load Sector Address in 7 Clocks eye 2Clocks 1 Clock 2 Clocks 


Write the 6th command(target sector to be erased) to the device in FWH mode. 
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Timing Waveforms for FWH Interface Mode, continued 


13.6 FGPI Register/Product ID Readout Timing Diagram 


«_1L% 
meser 4 


FWH4 4 5 


Start IDSEL Address M Size Sync Data Next Stq 

FWH[3:0] 
14, YEP es XE) a a EX a BEX mY Xow HH KTR TX] 
1 Clock 1 Clock Load Address "FFBC0100(hex)" in 7 Clocks for GPI Register 2 Clocks 1 Clock Data out 2 Clocks 2 Clocks 1 Clocl 


& "FFBC0000(hex)/FFBC0001 (hex) for Product ID 


Note: During the GPI read out mode, the DQ/4:0] will capture the states(High or Low) of the FGPI[4:0] input pins. The DQ[7:5] are reserved pin: 








13.7 Reset Timing Diagram 





—_——« TPRST 


»—JUUWUUUUUUU 


P TKRST 


“LL <+——___ TrsTP 
#RESET 


Paes 
<— TRSTF- > 


FWH[3:0] —_PAXXKYXKY YS XXXXXO 
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14. ORDERING INFORMATION 


ACCESS POWER SUPPLY STANDBY VDD 
PART NO. TIME CURRENT MAX. CURRENT MAX. PACKAGE 
(nS) (mA) (mA) 


W39V040FBP 


32L PLCC 
W39V040FBQ 32L STSOP 


32L PLCC 
W39V040FBPZ 11 30 10 Lead free 

32L STSOP 
W39V040FBQZ 11 30 10 Lead free 


Notes: 








1. Winbond reserves the right to make changes to its products without prior notice. 


2. Purchasers are responsible for performing appropriate quality assurance testing on products intended for use in 
applications where personal injury might occur as a consequence of product failure. 


15. HOW TO READ THE TOP MARKING 
Example: The top marking of 32-pin STSOP W39V040FBQ 


(Winbond 
Electronics Corp. 


W39V040FBQ 
2138977A-A12 
3450BFA 





1* line: Winbond logo 

2™ line: the part number: W39V040FBQ 

3" line: the lot number 

4" line: the tracking code: 345 O B FA 
149: Packages made in ’03, week 45 
O: Assembly house ID: A means ASE, O means OSE. ...etc. 
B: IC revision; A means version A, B means version B, ...etc. 
FA: Process code 
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16. PACKAGE DIMENSIONS 
16.1 32L PLCC 































































































































































































Dimension in Inches |_Dimension in mm 
Min. | Nom. | Min. 
im He "7 pray (eae = 
- 7 “4 
bel 1 32 30 
t \ 
1 Ltr 
A / r 
8 |_]29 
Go 
tL] ble 
13 a1 
| Notes: 
1 
1 1. Dimensions D & E do not include interlead flash. 
e 20 --¢ 2. Dimension b1 does not include dambar protrusion/intrusio 
3. Controlling dimension: Inches 
4. General appearance spec. should be based on final 
tl v4 visual inspection sepc. 
Az A 
i 
x ' 
\ fellr J Te Je =< a 
Seating Plane aaa aC . 
\ 
Ge £ 








16.2 32L STSOP 


Ho 








Dimension in Inches Dimension in mm 


Min. Nom. Max. Min. . Max. 
0.047 1.20 











=, 0.006 0.15 





0.041 : 1.05 
0.010 i 0.27 
0.008 0.21 
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17. VERSION HISTORY 


VERSION DATE 


W39V040FB 


DESCRIPTION 





At August 19, 2004 


Initial Issued 





October 4, 2004 


3,17, 18, 20 


Modify Isb1, Tbp, Tpec, Icc (read) 


Add Icc (program/erase) and 
Toggle or polling interval 
Power supply voltage to Vss potential 








April 14 ,2005 








Important Notice 


Add important notice 





Winbond products are not designed, intended, authorized or warranted for use as components in systems or 
equipment intended for surgical implantation, atomic energy control instruments, airplane or spaceship instruments, 
transportation instruments, traffic signal instruments, combustion control instruments, or for other applications 
intended to support or sustain life. Further more, Winbond products are not intended for applications wherein failure 
of Winbond products could result or lead to a situation wherein personal injury, death or severe property or 


environmental damage could occur. 


Winbond customers using or selling these products for use in such applications do so at their own risk and agree to 
fully indemnify Winbond for any damages resulting from such improper use or sales. 


Winbond 


Electronics Corp. 


Headquarters 

No. 4, Creation Rd. Ill, 
Science-Based Industrial Park, 
Hsinchu, Taiwan 

TEL: 886-3-5770066 

FAX: 886-3-5665577 
http://www.winbond.com.tw/ 


Taipei Office 

9F, No.480, Rueiguang Rd., 
Neihu District, Taipei, 114, 
Taiwan, R.O.C. 

TEL: 886-2-8177-7168 

FAX: 886-2-8751-3579 


Winbond Electronics Corporation America 
2727 North First Street, San Jose, 

CA 95134, U.S.A. 

TEL: 1-408-9436666 

FAX: 1-408-5441798 


Winbond Electronics Corporation Japan 
7F Daini-ueno BLDG, 3-7-18 

Shinyokohama Kohoku-ku, 

Yokohama, 222-0033 

TEL: 81-45-4781881 

FAX: 81-45-4781800 


Please note that all data and specifications are subject to change without notice. 
All the trade marks of products and companies mentioned in this data sheet belong to their respective owners. 


Winbond Electronics (Shanghai) Ltd. 
27F, 2299 Yan An W. Rd. Shanghai, 

200336 China 

TEL: 86-21-62365999 

FAX: 86-21-62365998 


Winbond Electronics (H.K.) Ltd. 
Unit 9-15, 22F, Millennium City, 

No. 378 Kwun Tong Rd., 

Kowloon, Hong Kong 

TEL: 852-27513100 

FAX: 852-27552064 
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